PT-2014-2049 · Ibm · Ibm Infosphere Biginsights

Published 2014-07-03 · Updated 2025-02-12 · CVE-2013-3993

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions prior to 2.1.0.3

Description The issue is related to insufficient access restrictions in IBM InfoSphere BigInsights, allowing remote authenticated users to bypass intended file and directory restrictions or access untrusted data or code via crafted parameters in unspecified API calls. This could potentially allow an attacker to disclose protected information.

Recommendations For versions prior to 2.1.0.3, update to version 2.1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to unspecified API calls to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-264

CWE-22

Related Identifiers

BDU:2022-03823

CVE-2013-3993

Affected Products

Ibm Infosphere Biginsights

References · 12

• https://bdu.fstec.ru/vul/2022-03823 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-3993 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21677445 · Vendor Advisory
• https://t.me/cvenotify/104955 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• http://secunia.com/advisories/59676 · Note
• http://securityfocus.com/bid/68449 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cvenotify/84816 · Telegram Post
• https://t.me/cvenotify/111106 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84982 · Note
• https://t.me/cvenotify/110350 · Telegram Post